SECURITY: Only redirect to our host by path on the login action